|Topic:||My profile block may disclose private information if used in user context|
|Versions affected:||<2.0.2 (1.9.x not affected)|
|Reported by:||Internal code review|
|Solution:||Upgrade to latest version|
|Workaround:||Uninstall the myprofile block and delete block/myprofile files|
The My profile block could allow disclosure of private information when placed on pages in the user context. The block was changed to show only current user information.